[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-24720/ruby-image-processing via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Jun 8 19:56:34 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
03cb2056 by Salvatore Bonaccorso at 2022-06-08T20:55:58+02:00
Track fixed version for CVE-2022-24720/ruby-image-processing via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22345,7 +22345,7 @@ CVE-2022-24722 (VIewComponent is a framework for building view components in Rub
CVE-2022-24721 (CometD is a scalable comet implementation for web messaging. In any ve ...)
NOT-FOR-US: CometD
CVE-2022-24720 (image_processing is an image processing wrapper for libvips and ImageM ...)
- - ruby-image-processing <unfixed> (bug #1007225)
+ - ruby-image-processing 1.10.3-2 (bug #1007225)
NOTE: https://github.com/janko/image_processing/security/advisories/GHSA-cxf7-qrc5-9446
NOTE: https://github.com/janko/image_processing/commit/038e4574e8f4f4b636a62394e09983c71980dada (v1.12.2)
CVE-2022-24719 (Fluture-Node is a FP-style HTTP and streaming utils for Node based on ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/03cb20561b4e69a47ffbd60aebcf37f34b8b5590
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/03cb20561b4e69a47ffbd60aebcf37f34b8b5590
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220608/7c597073/attachment.htm>
More information about the debian-security-tracker-commits
mailing list